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Abstract — We consider the wiretap channel model under the 
presence of a hybrid, half duplex adversary that is capable of 
either jamming or eavesdropping at a given time. We analyzed the 
achievable rates under a variety of scenarios involving different 
methods for obtaining transmitter CSI. Each method provides 
a different grade of information, not only to the transmitter on 
the main channel, but also to the adversary on all channels. 
Our analysis shows that main CSI is more valuable for the 
adversary than the jamming CSI in both delay-limited and 
ergodic scenarios. Similarly, in certain cases under the ergodic 
scenario, interestingly, no CSI may lead to higher achievable 
secrecy rates than with CSI. 

I. Introduction 

Information theoretic security has received a significant 
attention recently. One mainstream direction has been on the 
wireless transmission of confidential messages from a source 
to a destination, in the presence of internal and/or external 
eavesdroppers. Toward achieving that goal, the communicating 
pair exploits the stochasticity and the asymmetry of wireless 
channels between the communicating pair and the eavesdrop- 
pers. A stochastic encoder at the transmitter makes use of 
the available channel state information (CSI) in a way for the 
mutual information leaked to the adversaries remain arbitrarily 
small. It is designed in a way that, even when the adversaries 
have access to the full CSI of the main channel, i.e., between 
the transmitter and the receiver as well as the eavesdropper 
channel, i.e., between the transmitter and itself, it still will 
obtain an arbitrarily low rate of information on the message. 
Likewise, the adversary relies on CSI to make decisions. For 
instance, a half-duplex hybrid adversary, capable of jamming 
or eavesdropping at a given time (but not both simultaneously) 
decides between jamming vs. eavesdropping, based on the 
available CSI. 

The assumption that the adversaries have full CSI of 
all channels is typical in the literature Q-0- While this 
assumption leads to robust systems in terms of providing 
security as it makes no assumptions on the adversaries, it can 
be too conservative in some cases. For example, to obtain 
main CSI, an adversary relies on the same resource as the 
transmitter: feedback from the legitimate receiver. Hence, from 
the perspective of the receiver, there is a tradeoff between 
revealing CSI and keeping it secret: If the legitimate receiver 
chooses not to reveal CSI, it will sacrifice some achievable 



rate of reliable communication, but the adversary will have 
to make decisions under a higher uncertainty. In this paper, 
we study the tradeoffs involving obtaining CSI. We ask the 
questions, should a legitimate pair obtain CSI and if so, what 
should be their strategy? 

To that end, we focus on the system depicted in Figure [T] 
We assume all three channels to be block fading. In each 
block, based on the available CSI, the half-duplex adversary 
can choose to do jamming at a fixed transmission power or 
eavesdropping, but not both. Our objective is to maximize the 
rate of reliable communication over the main channel, subject 
to full equivocation [4] (weak secrecy) at the adversary. The 
adversary can follow an arbitrary strategy in its choice of 
jamming vs. eavesdropping at any given block. In the case 
in which the receiver feeds back main CSI, it may do so 
in two ways: directly by sending back the exact state of 
the channel or by sending reverse pilots, trying to exploit 
channel reciprocity (similar to 0). While the former method 
completely reveals the main CSI, it eliminates the possibility 
of the adversary to learn the jammer CSI. On the other hand, 
while the pilot feedback successfully hides the main CSI, it 
enables the adversary to estimate the jammer CSI. In terms 
of the secrecy encoding strategies, we address the possibilities 
under two general scenarios: the ergodic and the delay-limited. 
In the former case, one message is encoded across infinitely 
many blocks and in the latter case, a separate message is 
encoded over each block, to be decoded immediately. Thus, 
in the delay-limited scenario, we also impose an additional 
probabilistic constraint on the decoding and secrecy outage 
events. 

In the delay limited scenario, we show that by revealing the 
main CSI, the receiver achieves a higher secrecy rate under 
the outage constraint, compared to transmission with no CSI. 
Furthermore, we show that main CSI is more valuable for 
the adversary than the jamming CSI in both delay-limited and 
ergodic scenarios. In the ergodic scenario, we observe that the 
transmitter may not need the CSI to achieve higher secrecy 
rates. 

There is a recent research interest on hybrid adversaris. 
In (7), the authors formulate the MIMO wiretap channel as 
a two player zero- sum game in which the payoff function 
is an achievable ergodic secrecy rate. The strategy of the 
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Fig. 1. System Model 



transmitter is to send the message in a full power or to 
utilize some of the available power to produce artificial noise. 
The conditions under which pure Nash equilibrium exists are 
studied. In [6], the authors consider fast fading main and 
eavesdropper channels and static jammer channel. Under this 
channel configuration, they propose a novel encoding scheme 
which is called block-Markov Wyner secrey encoding. In (8), 
the authors introduce a pilot contamination attack in which the 
adversary jams during the reverse training phase to prevent 
the transmitter from estimating the main CSI correctly. As a 
result, the transmitter incorrectly designs precoder which will 
increase the signal strength at the adversary that eavesdrops 
the main channel during the data transmission phase. 

The rest of this paper is organized as follows. In Section 
we first describe the system model. We then explain the 
channel model and CSI feedback models. At the end of the 
section, we explain the problem formulations. In Section III 
we present the results for both delay limited and ergodic 



scenarios. In Section IV we present our numerical results and 
conclude the paper in Section [V] 

II. System Model and Problem Formulation 
A. Channel Model 

In this paper, we focus on a block fading channel model. 
Time is divided into discrete blocks and there are N channel 
uses in each block. Channel state is assumed to be constant 
within a block and varies randomly from one block to the next. 
We assume all parties are half-duplex, thus the adversary can 
not jam and eavesdrop simultaneously. 

The observed signals at the legitimate receiver and the 
adversary in z-th block are as follows: 



Y N {%) = G m (i)X»(i) + G z (i)Sf(i)Ij(i) + S»(i) (1) 
Z N (i) = G e (i)X N (i)(l - Ij(i)) + S?(i) (2) 

where X N (i) is the transmitted signal, P is the transmission 
power, Y N (i) is the signal received by the legitimate receiver, 
Z N (i) is the signal received by the adversary, S^(i), S^(i), 
and S^(i) are noise vectors distributed as complex Gaus- 
sian, £N(0,PjI NxN ), QN(0,I NxN ), and CN(0, Inxn), re- 



spectively, and Pj is the jamming power. Indicator function 
= 1, if the adversary is in a jamming state in the 
i-th block; otherwise = 0. Channel gains, G m (i), 

G e (i), and G z (i) are defined to be the independent com- 
plex gains of transmitter-to-receiver channel, transmitter-to- 
adversary channel, and adversary-to-receiver channel, respec- 
tively (as illustrated in Figure [TJ. Associated power gains 
are denoted with H m (i) = \G m (i)\ 2 , H e (i) = \G e (i)\ 2 , 
and H z (i) = \G z (i)\ 2 . We assume that channel reciprocity 
principle is valid for all channels, i.e., reverse channels and 
forward channels have identical gains. We also assume that 
joint probability density function of instantaneous power gains, 
/ H (h), where H = [iJ m (.) H e (-) H z (-)] 9 is well defined and 
known by all entities. 

B. Methods for Obtaining CSI 

The legitimate pair may choose to obtain main CSI or 
communicate without it. We call the latter strategy the no 
CSI case. If they choose to obtain main CSI, at the beginning 
of each time block, the transmitter sends training symbols to 
the legitimate receiver. In this paper, we ignore the overhead 
associated with this training process. We assume that, using the 
training symbols sent at the beginning of block i, the legitimate 
receiver obtains perfect knowledge of G m (i) and the adversary 
obtains perfect knowledge of G e (i). 

Once the receiver observes main CSI, it uses two possible 
methods for feeding back this information. The first one is 
directly feeding back the observed channel state: the value of 
G m {i) is encoded at the receiver and sent to the transmitter 
in a feedback packet. Thus, we call this feedback method 
the packet feedback. We assume that the legitimate receiver 
and the adversary both decode this packet successfully and 
learn G m (i). The second method is using pilot based CSI 
feedback in which the receiver sends training symbols to the 
transmitter. We call this second method the pilot feedback. 
We assume that by using these reverse training symbols, the 
legitimate transmitter obtains perfect knowledge of G m (i) and 
the adversary obtains the perfect knowledge of G z (i). Thus, 
in the first method, the adversary obtains the knowledge of 
G m (i), but not G z (i), whereas the reverse is true in the second 
method. 

C. Adversary Model 

The goal of the adversary is to minimize the achieved 
secrecy rate. The strategy space of the adversary in each block 
is binary: jamming or eavesdropping. The transmitter does 
not observe the strategy of the adversary in any given block, 
whereas we assume that the adversary knows the strategy of 
the transmitter a priori. 

From one block to the next, the adversary chooses its 
strategy based on the transmitter's strategy and the obtained 
channel power gain^] i.e., h e (i) for the no CSI case, h e (i), 
h m (i) for the packet feedback case, and h e (i), h z (i) for the 
pilot feedback case. We denote the vector of channel power 

! The realizations of the random variables are represented by lower case 
letters in the sequel. 



gains observed by the adversary at the beginning of the ith 
block with tu(i). 

The secrecy level of a transmitted message is measured by 
the equivocation rate at the adversary. The equivocation rate 
at the adversary is defined as the entropy of the transmitted 
message conditioned on the channel output and the available 
CSI at the adversary. If the equivocation rate is equal to the 
secrecy rate, the message is said to be transmitted with perfect 
secrecy. 

D. Encoding of Information 

In our system, we consider two levels of encoding. At 
the higher level, secrecy is realized Wyner code introduced 
in (4). There, C s (R m ^ R s , NM) represents a Wyner code of 
size 2 NMRrn that bears a confidential message set W s = 
{l,2,...,2 NMi * s }, where NM is the codeword length in 
number of bits. A message, w s G W s is mapped to NMR m 
bits by a secrecy encoder [4 ] and these NMR m bits are then 
mapped to channel encoded bits at the lower level of encoding 
using a sequence of codes, Ci(2 NR ^ hm ^\ N), one for each 
block i, 1 < i < M. Here, the code rate, R(h m (i)), is 
chosen based on the main CSI, obtained at the transmitter. 
The sequence of codewords is denoted with x NM G X NM , 
and the decoder, (/>(•) maps the received sequence, 

yNM tQ 

w G W. The average error probability of the sequence of codes 
{Ci} is denoted with the associated sequence Pj VM . In this 
paper, we focus on two scenarios as to how secrecy encoding 
and channel encoding are applied: delay limited and ergodic. 

1) Delay-Limited Scenario: In the delay-limited scenario, 
the transmitter encodes a separate secret message, W s (i) in 
each block i. Consequently, we use a separate secrecy encoder 
C s (i) = C s (Rm(i), R s , N) for each block, where R m (i) 
is chosen to be identical to R(h m (i)) to meet the channel 
rate. The channel encoder merely maps these NR m (i) bits 
to N Gaussian random variables, X N , forming a Gaussian 
codebook Ci(2 NR ^ hm ^\ N). For the delay-limited scenario, 
we define the secrecy outage and connection outage events 
as: 

I(X N ;Z N \h e (i)) 



N 



I(X«;Y"\h m (i)) 
N 



> R(h m (i)) - R s and (3) 
< R{h m {i)), (4) 



respectively, where X N ~ CN(0, PI NxN ) 

2) Ergodic Scenario: In the ergodic scenario, the transmit- 
ter has one secret message W s and encodes it over M blocks 
using the C s (R mj R SJ NM) encoder. In the ergodic scenario, 
secrecy rate R s is said to be achievable if, for any e > 0, there 
exists sequence of channel codes {Ci} for which the following 
are satisfied: 



-)NM 



< e 



MN 



H(W s \Z M \h^)>R s -e 



(5) 
(6) 



for sufficiently large N and M and for any h^f G Am such that 



P[A 



Af\ 



1. Here, we consider two possible channel encoding 



strategies: 

1. Encoding across blocks: We use this strategy in the 
no main CSI case. In this strategy, the NMR m bits at the 
output of the secrecy encoder is channel encoded via a single 
C(2 NMRm , NM) Gaussian codebook and the NM symbols 
are transmitted over the channel over M blocks. 

2. Block-by-block encoding: We use this strategy when 
the main CSI is available. To utilize the main channel 
knowledge, the transmitter chooses some h* and encodes 
the information using a Gaussian codebook with the rate 
R(h m (i)) = log (l + i+ffi* ) over block i. With this choice, 
the transmitted codeword will not be decoded successfully 
if the adversary is in the jamming state and h z (i) > h*. 
To handle this possibility, we use a plain ARQ strategy 
in each block (similar to (9)). Transmissions that receive a 
negative acknowledgement (NAK) are retransmitted until they 
are decoded successfully. 



E. Problem Formulation 

One can notice that, in both the delay-limited and the 
ergodic scenarios, we use a constant secrecy rat^Jii^. The goal 
of the transmitter is to maximize the secrecy rate, R s over the 
strategy space of secrecy encoding and channel encoding rates. 
To that end, we consider the worst case scenario, in which 
the adversary perfectly tracks the strategy of the transmitter 
in each block. Furthermore, since the transmitter does not 
know the real state of the adversary, the strategy pair of 
the transmitter should satisfy the constraint for any arbitrary 
strategy of the adversary. Thus, we choose the secrecy rate 
using: 

R* = max min R s (7) 

Rm(i),R s Ij{i) 

for all i in both the delay-limited and the ergodic scenarios, 
subject to the following outage constraint in the delay-limited 
scenario only: 

1 M 

J im XfE^w^w + a-^w^o^w^a w 

M— ^oo 1V1 z — ' 

i=l 

with probability 1, where Ic(i) an d Is(i) are indicator func- 
tions that take on a value in case of a connection and a 
secrecy outage, respectively. We evaluate R* under the no 
CSI, packet feedback, and pilot feedback cases. Note that the 
constraint enforces that the fraction of packets that are not in 
the both secrecy outage and the connection outage should be 
larger than a threshold as the number of blocks, M, goes to 
infinity. 

Note that, the reason why we focus on the specific encoding 
strategies specified under delay limited and ergodic scenarios 
in Section II-D| is that, the solution, R* s , of the maximin 
problem stated in ^ is unknown |[TT1l . 

2 For the delay-limited case, it is constant over the entire sequence of Wyner 
codes. 



III. Results 

A. Delay Limited Scenario 

The outage constraint in ([8} is formulated as 

1 M 

C = lim mE^c 



iog(i+ 1 ^ ( ; ( ) i) )>^ m (i)) 



+ (1 - ^j(0) / log(l + P^ e (i))< J R(^ rn (i))- 



X/i 



io g (i+Pff m (i))>fl(fr m (i)) 



(9) 



Note that in ([9]), the secrecy outage event is represented with 
log (1 + Ph e (i)) > R(h m (i)) — R 3 and the connection outage 
events are given as log ^1 + 1 ^p m ^^ ) < R(h m (i)) and 

log(l + P/l m 00) <R(hm(i)). 

Theorem 1. For the delay limited scenario, the solution of 
subject to constraint |9]) leads to the following ordering 
of the achievable rate with respect to the type of feedback: 



ffNo CSI <^ j^Packetfe 



c eedback 



< R 



<Pilot Feedback 



(10) 



The above theorem implies that main CSI, which is obtained 
with packet feedback is more valuable for the adversary than 
the jammer CSI, which is obtained with pilot feedback. We 
now give an outline for the proof. The details of the proof can 
be found in Section |VI] 

The Outline of Proof of Theorem [7} The basic idea is 
to compare the feasible set of the problem ([7} for three cases. 
The feasible set is defined as 



J = {(R S ,R(-)) :C>a w.p. 1, MA p } 



(11) 



where A p is the set of channel power gains, h,A(i), such that 
the adversary is in the jamming state if /ia(^) £ A p . The equiv- 
alent form of (|7J) is as follows: R* — max(# s?jR (.)) G ^ R s . We 
observe that the solution to ^ is directly related to the size of 
the feasible set. The strategy pair (R s , R(-)) is the element of 
the feasible set, H if C m { n = min^ p C[(R S , R(-))] > a w.p. 1. 
We can write C m i n for the no CSI and packet feedback cases 
as follows: 



r 1 



Packet Feedback 

rain 



R s + log (1 + PH e ) < R(H m ) < log 1 



PjH z 



r 



No CSI 



R s + log (1 + PH e ) < R < log 1 



1 



P 3 H Z 



We can observe that F No CSI c F Packet Feedback so we have 
^Nocsi < ^Packet feedback By assum i ng me adversary is full- 
duplex, we find a lower bound, C lowerbound for C min at CSI 
feedback cases. Then, we observe C lower bound = C^ et Feedback 
which shows C^ et Feedback < CS Feedback and this concludes 
the proof. ■ 



B. Ergodic Scenario 

We first present a secrecy rate that is achievable under the 
no CSI case. 

Theorem 2. The achieved secrecy under no CSI is: 
jjNo csi _ 

PH m 



E 



log 1 



1 



P 3 H Z 



log(l + Ptf e ) 



(12) 



The proof of ( [12] ) can be found at Section |VII| Next, we 
present an upper bound for the secrecy rates achieved with the 
block-by-block encoding strategy. 

Theorem 3. Under the block-by -block encoding strategy, the 
achievable secrecy rate is upper bounded by 



R± = E 



log 1 



PH n 



PjH z 



- + 

log(l+Ptf e ) 

xP[H z <h* z ] (13) 



To find this upper bound, we employ the following strategy. 
When the transmitter receives a NAK signal, the transmitter 
sends an independent group of bits on the next block instead of 
retransmitting the previous packet lfT2l . In (T2), the authors use 
this scheme for the secret key sharing. The crucial observation 
is that an upper bound for the achievable secret key rate is also 
an upper bound for the achievable secrecy rates. The details of 



the proof can be found at Section [Vni| N ote that with the plain 
ARQ strategy described in Section II-D2 the achievable rate is 
identical to the expression provided in ( 13 ), with P[H Z < h*) 
replaced with (P[H Z < hi]) 2 , and H z in the expectation term 
replaced with h* as shown in 0. 

By comparing the upper bound given in Theorem [3] we 
gain understanding on the performance of no CSI case. In 
particular, whenever the achievable rate with the no CSI case 
exceeds this bound, we know for sure that encoding across 
blocks (no CSI) is preferable over block-by-block encoding 
with CSI. The main difference between block-by-block en- 
coding and encoding across blocks is that, in the former, the 
unsuccessfully received packets are discarded, whereas in the 
no CSI case, all the information received by the receiver is 
used to decode the message. The set of parameters for which 
this is the case is illustrated in Section [TV] in an example. 

One can also write a general relationship between the 
performance with packet feedback and pilot feedback: 

Theorem 4. Any secrecy rate achievable with packet feedback 
strategy is also achievable with pilot feedback strategy. 

Theorem |4j shows that main CSI is more valuable for the 
adversary than the jamming CSI in the ergodic scenario, as 
was the case in the delay limited scenario. The proof can be 
found at Section fTxl 

IV. Numerical Evaluation 

We first analyze the delay-limited case. We assume that both 
main and eavesdropper channels are characterized by block 
Rayleigh fading, where the main channel and eavesdropper 



channel power gains follow an exponential distribution with a 
mean 10 and 1, respectivel)^] We also assume the jamming 
channel does not experience fading, where power gain is equal 
to 1. The transmission power, P, and the jamming power, 
Pj are identical and chosen to be 1. In Figure [2] we plot 
the secrecy rate, R s , as a function of the outage constraint 
threshold, a under the no CSI, the packet feedback, and the 
pilot feedback cases. The achievable rates in Figure [3] follow 
the same ordering as given in Theorem ([T]). 



Pilot Feedback 

Packet Feedback 

No feedback 



0.2 0.4 0.6 0.8 

Outage Constraint Threshold, ot 



Fig. 2. Delay Limited Scenario: Comparison of CSI feedback methods under 
the outage constraint. 

Next, we simulate the ergodic scenario and compare the two 
strategies, encoding across blocks without CSI and block-by- 
block encoding with packet CSI feedback. We used the same 
power parameters as in the simulations for the delay-limited 
case. All three channels are assumed to be block Rayleigh- 
fading wtih E[H Z ] = 1 We select the encoding parameter, h* 
such that P[H Z < h* z ] = 0.75. 

In Figure [3] we illustrate the region where the encoding 
across blocks outperforms the block-by-block encoding on the 
(E[H e ], E[H m ]) space. The region to the left of the border, 
given in the plot contains the set of (E[H e ], E[H m )) for which 
the encoding across blocks results in a higher secrecy rate. 
The intuition behind this observation is that, when E[H m ] is 
much larger than E[H e ], the positive operator inside the upper 
bound, R + loses its significance. 

V. Conclusion 

We consider the wiretap channel model under the presence 
of half duplex adversary that is capable of either jamming or 
eavesdropping at a given time. We analyzed the achievable 
rates under a variety of scenarios involving different methods 
for obtaining transmitter CSI. In particular, we considered no 
CSI, CSI with packet based feedback, and CSI with pilot 
based feedback. Each method provides a different grade of 
information not only to the transmitter on the main channel, 
but also to the adversary on all channels. We show for the 

3 Such a difference may occur in the cellular setting, when the receiver 
is a base station with many antennas or in a wireless LAN setting, where 
the receiver is located at a favorable position for reception, compared to an 
external adversary. 
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Fig. 3. The region where encoding across blocks with no CSI outperforms 
block-by-block encoding with packet feedback. 



delay limited scenario that, the highest secrecy rate is achieved 
with the pilot based feedback. Similarly, in the ergodic case, 
we prove that the pilot-based CSI feedback outperforms the 
packet-based CSI feedback, however interestingly, in certain 
cases no CSI may lead to a higher achievable secrecy rates 
than with CSI. 

VI. Proof of Theorem [T] 
Feasible set for the problem ([7]) is defined to be 

3={(R s ,R(.)):C>a,\/A p } (14) 

where A p is the set of channel power gains such that the 
adversary is in the jamming state if ft^(z) G A p . We have the 
following lemma. 

Lemma 5. If 5F ^ 0, the solution to ([7| is identical for all 
strategies of the adversary. 

Proof: The equivalent form of ([7]) is as follows: 

R* = max R s (15) 



As seen from (15), R* does not depend on strategy of the 
adversary. ■ 
However, the size of feasible set directly depends on the 
CSI feedback scheme. From ( [T5] ), we can see that the solution 
to ^ is directly proportional with the size of the feasible set. 
In the rest of the proof, we will use this observation to show 
the ordering. 



Lemma 6. R 



<No CSI 



< R 



Packet Feedback 



Proof: In the no feedback case, constraint term ^ is 
reduced to 



A I 



C= lim l/MYMt)! , PHro(0 

M^oo ^— ' logll+ 1+p 

t=l J 



\>R 



+ (1 - Ij(i))Ilog(l+PH e (i))<R-R s Ilog(l+PH m (i))>R (16) 
M 

1=1 v J 



^if e (i)0Ap^log(l+Pia r e (i))< J R- J R s ^log(l+Pia r m (i))> J R (17) 



E 



lHeeA p I \og(i+ 1 +pJ^ z ) >R 



+lH e eA p Ilog(l+PH e )<R-R a Ilog(l+PH m )>R] » W -P- 1 (I 8 ) 
-flog(l+Pff e )<fl-fi s - f log(l+Pff m )>i?- r ff 8 ^A p I H e = h e ] 

f He (he)dh e , w.p. 1 (19) 

l jB l / lo g (l + I ^)>fij^^ 

+ ^[7log(l+Pii r rr ,)>p]7iog(l+P/i e )<P-P s ^ e ^A p 

f He (h e )dh e ,w.p. 1 (20) 



where (17) follows from the fact that we have 



lH e (i)eA p since the adversary only knows the instantaneous 
power gain of the eavesdropper channel, ( [T8]) fo llows from the 
strong law of large numbers theorem and (|20|) follows from 
the independence of H e , H m , and H z . 



A* set that minimizes C is as follows: 

A; = {h e : log (1 + Ph e ) <R-R S } 
The minimized C for a given rate pair (R s , R) is 

qNo CSI _ 

/ p TJ 

R s + \og{l + PH e ) <R<\og 1 



(21) 



1 + 



Feasible set for the transmitter for the no CSI feedback case 
is as follows 



? No CSI 



{(R a ,R) :C NoCM >a} 



(22) 



We now show that F No CSI C F Packet Feedback . For the packet 
feedback case, channel encoding rate is a function of the main 
CSI, H m . The adversary knows the instantaneous power gains 
of the eavesdropping channel and the main channel. Constraint 
term in ([9]) is reduced to 

M 



c = jfc, 1/M 2 Ij{i)I ^i +T WA)>Wi)) 

1=1 V 

+ (1 - /j(^))/log(l+P J H r e (i))<P( J Fi r rn (i))-P s 

4>g(i+p# m (i))>i*(# m (i)) (23) 



' 7l g(l+P/i e )<P(/i rri )-P s 7i og (i + p/ lrn )> jR (/ lrri )// lrn) / le ^^ p 

fH e ( h e)fH m (h m )dh e dh m , w.p. 1 (26) 



where (24) follows from the facet that = 
lH m (i),H e (i)eA p since the adversary knows both the 
instantaneous power gain of the eavesdropper channel and 
the main channel. ([25]) follows from the strong law of large 



numbers theorem and ( 26 ) follows from the independence of 



H e , H m , and H z . A* set that minimizes C is as follows: 

A* p = {fc m , h e I log (1 + Ph e ) < R(hm) ~ Rs} 

\J{h m , h e : log (1 + Ph m ) < R(h m )} (27) 
When we combine ( [26] ) and ( [27] ), the minimized can be 

^Packet Feedback written as 
^Packet Feedback 



R s + log (1 + PH e ) < R(H m ) < log 1 



P 3 H Z 



Feasible set for the transmitter for the packet feedback case is 
as follows 



TiPacket Feedback 



{(R S ,R(-)) :C ] 



Packet Feedback 



> a} (28) 



It is easy to see that F No CSI c F Packet Feedback then we have 

jj>No CSI <^ ^Packet Feedback _ 
Lemm<J 7 ^Packet Feedback <^ j^Pilot Feedback 

Proof: We will show that for any given (R 8 ,R(-)) 9 
^Packet Feedback ^ s a i ower bound for ^ in the channel feedback 
cases. Constraint ([91 can be written as 



M 



M — >oo 

1=1 



(29) 



J™, V M £ 7 (^W,^(0)e^ 7 i og ( 1+T P»)>K ( H„ 

i=l 3 y 

+ I(H m (i),H e (i))gA p Ilog(l+PH e (i))<R(H m (i))-R s 

I\og(l+PH m (i))>R(H m (i)) (24) 

^ m ,if e GA p / log ^ 1+ ^ ) >R(H m ) 

+lH rn ,H e £A p I\og(l+PH e )<R(H m )-R s I\og(l+PH m )>R] > 

w.p. 1 (25) 



= £ 



where 

= {MO, MO, MO : ^W f iog(i +I j^)<fl(/i m (i)) = 

|J{/i m (i),/i e (i),/i z (i) : /£;(0^og(i+P^ e (i))>P(^(i))-P s = 1} 

|J{/i m (i),/i e (i),/i z (i) : /s(0^io g (i+p/i m (i))<i2(/i m (i)) = 1} 

(30) 

Constraint C decreases as the siz of set increases. Let's 
define an upper bound for 0: 

q Upper Bound 

= {Mt),Mi),M<) : / i og (i +T ^) IT )<p(^(,)) = !> 

(J{ftm(«)> h e (i),h z (i) : /i og (i+p^ e (i))>p(/i rri (i))-p s = 1} 

|J{/i m (i),/i e (i),^(i) : - r io g (i+P/i m (i))<p(h m (i)) = 1} (31) 

where = Ie{^) = l?Vz G N. Then, we find a lower 

bound for C by putting O u PP er Bound in J29l: 



Ih m ,h e 



eA v 



C 



Lower Bound 



M 

LIT1 

M 

^Packet CSI 



(32) 



Since £7 Lower Bound = ^/Packet Feedback we J^^ve 3~ Lower Bound 
^-Packet Feedback ^- ^Pilot Feedback 



VII. Proof of Theorem [2] 



We empl oy th e encoding across block strategy explained 



in Section 
Rm < E 



II-D 



where R rn = E 



log (l + i^fc) 



. If 



log ^1 + Y^jrjj 1 , the adversary prevents the 
reliable communication by jamming at every block. Note 
that in no CSI case, the adversary only obtains h e (i) so 

H(W\Z NM h M ) 

equivocation rate is defined as — - — l NM 1 e ; . Equivocation 
analysis for the encoding across block is as follows. 

H(W\Z NM ,h?) 

= H(W, X NM \Z NM : hf) - H(X NM \Z NM : W, hf) 
= H(X NM \Z NM , hf) + H(W\X NM , Z NM , hf) 

-H(X NM \Z NM ,W,hf) 
> H(X NM \Z NM , hf) + H(X NM \Z NM , W. hf) 
= H(X NM \hf) - I(X NM , Z NM \hf) 



(a) 



MNR n 



+ H(X NM \Z NM ,W,hf) 

■I(X NM ,Z NM \hf) 

-H(X NM \Z NM ,W,hf) 



> MNR n 



M 



M 

2 = 1 



Ny]i{x N {i),z N (i)\h e (i)) 

-H(X NM \Z NM ,W,hf) 
> AINR m - N y ;iog(l + Pft e (i)) 

-H(X NM \Z NM ,W,hf) 

where (a) follows from the fact that codeword X NM is 
uniformly distributed over a set of size 2 NMRrn . We continue 
with the following steps. 

H(W\Z NM : hf) 



NM 



E^i log(l + Ph e {i)) H(X NM \Z NM , W, hf) 



> R 



M NM 

> R m -E[log(l + PH e )]-e 1 

H(X NM \Z NM ,W,hf) 



> R m - E [log(l + PH e 
= R s — ( . 



NM 
■ ei - e 2 



where e = ei + e 2 . Here, (6) is satisfied for any e\ > and 
/i e M Gi M with Pr[A M ] = 1 and M > M(e 1 ) since 

1 M 

J im M E ^ + PH *®) = E + P ^)l 



M- 



with probability 1, (c) follows from the Fano's inequality. 
Let's define R e ^ R m - R s and Pf M 4 P[X^ M ^ X^ M ] 
where = g(Z NM , hf , W) is the estimation of the 

codeword X NM . 

H(X NM \Z NM , W, hf) < pjVM ^ + g(Pj™) (33) 



NM 



NM 



<e 2 



(34) 



Here, any e 2 > 0, ( 34 ) is satisfied for sufficiently high N and 
M. The reason is that since R e = I(X N , Z N \H e ), Pf M 
for the sequence of codes (2 NMRe ,R e ) as M — )> oo. 

VIII. Proof of Theorem[3] 

We first show that if R s is an achievable secrecy rate 
under the packet feedback strategy, we have for any e > 
0, j^H(W\Z NM ,H^,H^) >R s -e,VN> 7V(e),VM > 
M(e). Note that here, the message W is conditioned on 
random vectors, iP M and H^ . 



1 



NM 

-L 



H(W\Z"M,HZ,H™) 



(35) 



NM 



> I (R s - e)f H M, H M Oft , /if ) d/# dftf 



(36) 
(37) 



where .Am is the set defined in Section |II-D2[ Here, ( |36| ) 
follows from the definition of achievability, and ([37|)follows 
from the fact that P[Am] = 1. We consider the following 
case for the rest of the proof. When the transmitter receives 
a NACK signal, on the next block, the transmitter sends 
an independent group of bits instead of retransmitting the 
previous packet HT2\ . In fT2ll . the authors use this scheme for 
the secret key sharing. The crucial observation is that an upper 
bound for an achievable secret key rate is also an upper bound 
for achievable secrecy rates. 

We define index set F that contains the indexes of blocks 
on which the transmitted codeword is successfully decoded. 
Suppose that size of F is M', n' = NM', and n = NM. We 
now prove that ±H(W\Z n ,Hf ,Hf) < Rf as n -> oo. 

H{W\Z\Hf,H™) 
< H(W\Z n ,HM,H™) 



H(W\Z n , F n , , , H f 



(b) 



M' 



Hf) 



H(W\Z n ,H, 

- H(W\Z n ' ,Y n ' , Hf , Hf , Hf ) 
I(W; Y n ' , ^ | Z n ' , Hf , Hf ) + 5 n 



nS ri 



(c) 



< I(X n ;Y n ' ,Hf\Z 

— T ( V n ' • IlM' I yn ttM' ttM ' \ 
tM' ttM' 



5 "ra "> 
T M' ttM' 



- 7(X"' ; Y n \Z n ' , H£ , Hf , H?) + nS n 
I{X n ';Y n '\Z n ',H™',Hf,Hf) 

M 



(d) 



( = } WW', Y N {i)\Z N {i), H z (i), ff m (i), ff c (i))/(i) 



log 1 



PH„ 



i + 



log(l + Ptf e ) 



+ n5 n 



where = lH z (i)<h* z - Here, (a) follows from Fano's 

inequality (b) follows from the independent choice of the code- 
word symbols transmitted in each block that does not allow the 
eavesdropper to benefit from the observations corresponding 
to the previous NACKed blocks, (c) results from the data 
processing inequality, (d) follows from the independence of 
X n ' and Rf', (e) follows from 0, and (f) follows from ifTOl . 

1 



H(W\Z n ,HM jH M) 

PHm, 



n 

< E 



log 1 



1 



P 3 H Z 



i + 



log(l + PH e ) 
1 M 



(38) 



(39) 



(«r) 

R e < aE 



log 1 



PH„ 



l + PjH z 



log(l + PH e ) 



(g) follows from the fact that 5 n — > as N, M — > oo and from 
the ergodicity of channels such that jj Y^nLi (*) — ^ P[H Z < 
ft,*] as M ->• oo. 

IX. Proof of Theorem|4] 

Suppose that i? s is a secrecy rate achieved with the packet 
based strategy and n = NM. Notice that the equivoca- 
tion rates for the pilot and packet feedbacks are defined 
as lH(W\Z n ,hf) and \B{W\Z n , ftf , h%), respectively. 
Since R s is an achievable rate with the packet based strat- 
egy, by definition, for any e > there exists N(e) and 
M(e) such that for N > N(e) and M > M(e), we have 
±H(W\Z",h?,h%) > R s - e, V(ftf ,h%) e A M with 
P(A M ) = 1. 

We define A M {hf) = {h% : (h%,h?) £ ^ M }. 
Since i^^f and ifj^ are independent random vectors and 
P[(H™,H e M ) G .Am] = 1, we have P[H% G ^t M (ftf )] = 
l,\/hf €A M -To observe that 



M dh M 



(40) 



= / fH^,HM(h^,h^) dh: 

J Am 

= I fHM(hf) [ fHM{h™)dh™ dhf (41) 



= I P[H m e A M (hf)]f H M(hf) dhf = 1 (42) 

J h M 

We can see that P[H m e A M {h™)] = 1, V/if G £ such 
that P[£] = 1. We now prove the lemma with following 
inequalities. 



^H(W\Z n ,hf ) > ^H(W\Z n ,h?,H%) 



(43) 



1 



^(W|^,/zf,^)/ H M(^) dfc£ (44) 



(6) 
> 



(c) 



(R s -e)f H M(h^)dh^ 



R s - e, Vftf G £ with P[£] = 1. 



(45) 
(46) 



(a) follows from the fact that conditioning reduces the en- 
tropy, (b) follows from the fact that since h% e A M (hf), 
(h%, hf ) e A M , and (c) follows from the fact that P[H m e 
A M {hf)\ = 1. 
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